We will provide tailored POPIA and GDPR Readiness advice and support on your journey
End to End Data Protection
We will structure and drive the implementation of enterprise Data Protection programmes including technical guidance and policy frameworks
Data Culture Transformation
We will structure training interventions and awareness to win your workforce’s hearts and minds
In Focus
The South African Protection of Personal Information Act (POPI) was officially enforced on 1 July 2020
What most people don’t know is that certain provisions are already in effect (namely Sections 2 until 38; 55 until 109; section 111; and section 114 (1), (2), and (3)). [these cover, Codes of Conduct issued by the Information Regulator; procedures for dealing with customer complaints; provisions regulating direct marketing and unsolicited communications]
The remaining parts of the Act such as section 110 and 114 (4) will then come into effect from 30 June 2021. [states that all forms of processing of personal information must be made to conform to the Act]
POPIA (or GDPR) readiness is not an overnight exercise and insists on unconditional Senior Management buy in and accountability throughout the journey.
Below are just a few of the key questions all organisations regardless of size, industry or mandate should be ready to answer:
Have you appointed an Information Officer or an equivalent role to oversee information management?
Do you know what customer data you hold and where its stored (including at 3rd parties where applicable)?
Can you demonstrate that you have put in place adequate protection measures for your customer’s data?
Are you transparent on the purpose for which customer data was collected and is being used; and for how long you keep it?
Do you have accessible policies in place to guide your staff to responsibly handle customer data?
Blog Posts
When Cyber Insurance Meets Data Privacy Legislation
